by Kastro
Paper/Archive/CVE-2023-49312

CVE-2023-49312

mitre — Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is…

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 52.2.522 × 2010.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refprecisionbridge.net/738vulnerabilityrefprocesshacker.sourceforge.io/archive/website_v2/features.php